<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Chris,<div><br></div><div>Depends on the parameters of the AuthnRequest and on exactly how and why login fails, but generally speaking, with a failed authentication attempt and a properly configured IdP using username/password authentication, the user will get a Credentials not recognized error on the page. If they're not in possession of valid login credentials, they may get stuck there. Proper help desk/password reset/etc. information</div><div><br></div><div>For external and REMOTE_USER authentication, it's really up to the authentication mechanism. They can pass the user back to Shibboleth with no authentication and the user will get passed back to the SP with the error. The SP will present it, and the user will typically be stranded there.</div><div><br></div><div>The SP will rarely be able to better help the user authenticate at the IdP than the IdP will, so it's great if the IdP provides the user with the necessary resources in the case that they fail to authenticate successfully.</div><div><br></div><div>Take care,</div><div>Nate.</div><div><br><div><div>On Jul 25, 2012, at 20:07 , Me wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; font-size: medium; "><span class="Apple-style-span" style="font-family: sans-serif; font-size: 16px; ">Hello all,<br><br>I was hoping to get some clarity on the login process. At what point in a failed login does the IDP send the user back to the SP? Also with htaccess you get a error page when author fails. Do you get the same error page with failed Shibboleth author?</span></span></blockquote></div><br></div></body></html>